Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DE4DAC21C11F1B1CA59EBCE1D38B0.roa
File:                     282DE4DAC21C11F1B1CA59EBCE1D38B0.roa (raw, json)
Hash identifier:          k3l/njQYIpTrAb7zfzRhprOhUC3MtfhloSE/kheGvNk=
Subject key identifier:   31:64:B7:E0:BD:87:FB:2E:2A:F0:2A:5F:EF:13:D1:8F:83:A0:44:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DE4DAC21C11F1B1CA59EBCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 06:56:02 +0000
ROA not before:           Wed 07 Oct 2026 06:55:57 +0000
ROA not after:            Sat 14 Nov 2026 06:55:57 +0000
asID:                     21859
IP address blocks:        154.194.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126116 (0x1eca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 06:55:57 2026 GMT
            Not After : Nov 14 06:55:57 2026 GMT
        Subject: CN=6ac5ed02-1e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:1e:4d:31:e5:04:ce:5a:f7:7d:42:64:6c:
                    9d:aa:53:a1:cc:f9:8d:83:29:78:be:72:a1:26:39:
                    f8:75:ce:7c:d7:f4:fd:bd:37:1a:c5:7b:cc:c1:15:
                    bb:6f:cc:d3:d0:a0:cb:c4:29:a4:7d:15:99:2a:8f:
                    49:8d:4f:f2:02:ff:9b:25:6e:9b:8f:3c:0f:76:d0:
                    d0:b1:11:31:1f:df:24:c9:34:3e:04:31:8c:e6:a0:
                    a0:e6:92:20:33:5f:f4:19:ea:cb:d7:ec:95:06:78:
                    fd:5f:b0:b2:e9:8b:3e:11:c8:37:b9:3a:12:6b:52:
                    4a:8b:8a:56:31:2d:f4:5d:eb:41:c6:dc:d9:24:ab:
                    fb:34:ae:88:a7:91:f7:77:55:34:d8:5f:16:96:5c:
                    84:06:bb:29:e2:8d:ac:e5:4f:bc:dc:65:bd:94:60:
                    6f:db:22:3e:46:c7:53:2e:9e:50:c0:b0:f9:b2:64:
                    e3:68:b2:c7:98:ea:2e:c3:2d:97:f1:99:12:af:9f:
                    b0:6c:91:b3:28:5f:d0:00:3a:b8:1b:07:42:da:82:
                    56:9e:72:72:72:64:5d:0c:94:2b:48:f2:1a:75:41:
                    c3:a8:62:2e:e3:e1:84:48:a2:08:13:a1:f5:0d:d3:
                    a3:00:3e:e4:00:59:54:76:d5:3f:8f:68:7a:12:4f:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:64:B7:E0:BD:87:FB:2E:2A:F0:2A:5F:EF:13:D1:8F:83:A0:44:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DE4DAC21C11F1B1CA59EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:48:ef:28:79:23:58:8b:37:0b:aa:ee:04:91:e8:c9:37:e4:
         19:fa:6d:f1:9e:b2:d1:a1:c5:69:d9:d9:5c:35:42:b2:3e:4c:
         1e:17:8a:1e:7e:42:a2:ff:59:89:4a:ee:85:00:1c:e3:23:38:
         b9:c5:78:e9:e1:58:63:5a:65:e3:f3:85:5b:66:d0:20:d7:11:
         ea:f0:1f:2a:ff:e4:5f:50:85:3c:85:e8:1b:e8:9c:e1:d1:1c:
         f0:00:04:d5:a0:50:c3:bb:8f:d1:f0:ce:3f:4a:f5:85:1c:16:
         f7:43:38:6f:84:6d:80:4a:e9:f4:22:8a:b5:4a:91:ac:f3:2b:
         3b:fd:5b:42:86:00:55:83:cf:70:d1:6e:6b:05:77:71:b6:df:
         65:72:97:e7:aa:8e:96:cd:25:1c:be:53:29:f9:d6:7f:b2:93:
         33:75:4b:60:d6:b5:51:aa:af:98:31:75:15:42:34:1d:2d:9e:
         bc:96:da:56:b2:f8:c3:79:c5:e7:3e:a7:c0:f7:f7:61:c4:ae:
         e1:7c:86:57:c0:8a:2e:1e:60:67:98:96:c3:51:7a:28:14:73:
         9f:33:de:c0:df:14:68:bc:b1:87:26:be:71:a7:88:f2:a1:db:
         e3:8f:2d:e6:34:52:a0:4c:99:07:84:9b:83:37:fb:fa:29:1c:
         f4:6d:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----